D
Vendor security profile1 actively exploited CVEs
dotcms
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs2
Critical0
CISA KEV1
Public exploit2
Patch rate%0
Avg. CVSS4.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
2toplam CVE
Medium1 (50%)
Uncertain1 (50%)
Patch and exploitation view
%0
Verified patch
%50
CISA KEV
%100
Public exploit
0Patch available
0Partial
1Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
9.4
CVE-2026-16337Improper privilege management in dotCMS
Patch status unknownEPSS %1
-
CVE-2022-26352 Actively exploiteddotCMS Unrestricted Upload of File Vulnerability
Workaround Public Exploits:1EPSS %91
4.8
CVE-2020-35274Cross-site scripting in Dotcms
Patch status unknown Public Exploits:1EPSS %1